I'm working with a lot of sensor data and i have been trying to develop a pareto chart to look at the problem children if you will, so our maintenence team can know what devices to focus on. for those of you unfamiliar with Pareto's Principle, it basically states that 80% of your problems stem from 20% of your causes. http://en.wikipedia.org/wiki/Pareto_principle#In_software
what I want is a scatter plot where the points are the device name, the y-axis is the percentage of total alarms, and the x-axis is the percentage of total devices. but I'm not entirely sure how to get there, here is what I have. thanks for the help.
class=incident subclass=problem incident_problem_type=alarm | eventstats count by unique_unit_name | stats count(unique_unit_name) as count_of_units | eval sum(count) as total